From owner-freebsd-net@FreeBSD.ORG Thu Nov 13 12:46:24 2008 Return-Path: Delivered-To: freebsd-net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C22211065678 for ; Thu, 13 Nov 2008 12:46:24 +0000 (UTC) (envelope-from sclark46@earthlink.net) Received: from elasmtp-scoter.atl.sa.earthlink.net (elasmtp-scoter.atl.sa.earthlink.net [209.86.89.67]) by mx1.freebsd.org (Postfix) with ESMTP id 78E068FC1A for ; Thu, 13 Nov 2008 12:46:24 +0000 (UTC) (envelope-from sclark46@earthlink.net) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=earthlink.net; b=RM8yraMG73g8DC3PEwfvyWG7YnnHifC/m8DRcAamDO4KJz/pQGPlJvQQC3ue3cl2; h=Received:Message-ID:Date:From:Reply-To:User-Agent:MIME-Version:To:CC:Subject:References:In-Reply-To:Content-Type:Content-Transfer-Encoding:X-ELNK-Trace:X-Originating-IP; Received: from [208.118.36.229] (helo=joker.seclark.com) by elasmtp-scoter.atl.sa.earthlink.net with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.67) (envelope-from ) id 1L0baX-00030g-9P; Thu, 13 Nov 2008 07:46:21 -0500 Message-ID: <491C219B.1050606@earthlink.net> Date: Thu, 13 Nov 2008 07:46:19 -0500 From: Stephen Clark User-Agent: Thunderbird 2.0.0.16 (X11/20080723) MIME-Version: 1.0 To: Robert Noland References: <491B2703.4080707@earthlink.net> <491B31F7.30200@elischer.org> <491B4345.80106@earthlink.net> <491B47D2.6010804@elischer.org> <1226525816.61187.35.camel@squirrel.corp.cox.com> In-Reply-To: <1226525816.61187.35.camel@squirrel.corp.cox.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-ELNK-Trace: a437fbc6971e80f61aa676d7e74259b7b3291a7d08dfec797487a0c0db311276bfe076d583af9b13350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c X-Originating-IP: 208.118.36.229 Cc: freebsd-net@FreeBSD.org, Julian Elischer Subject: Re: FreeBSD 6.3 gre and traceroute X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: sclark46@earthlink.net List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Nov 2008 12:46:24 -0000 Robert Noland wrote: > On Wed, 2008-11-12 at 13:17 -0800, Julian Elischer wrote: >> Stephen Clark wrote: >>> Julian Elischer wrote: >>>> you will need to define the setup and question better. >> thanks.. cleaning it up a bit more... >> >> 10.0.129.1 FreeBSD workstation >> ^ >> | >> | ethernet >> | >> v >> 10.0.128.1 Freebsd FW "A" >> ^ >> | >> | gre / ipsec >> | >> v >> 192.168.3.1 FreeBSD FW "B" >> ^ >> | >> | ethernet >> | >> v >> 192.168.3.86 linux workstation > > How are you mapping packets onto the gre? If firewall B doesn't know > how to reach the FreeBSD workstation directly, you will see the issue > that you describe. Can you ping 10.0.129.1 from Firewall B? The ttl > expired will be generated by Firewall B. ospf - I can ping 192.168.3.1 from the FreeBSD Workstation just fine in fact all the systems can ping just fine. > > robert. > >>> $ sudo traceroute 192.168.3.86 >>> traceroute to 192.168.3.86 (192.168.3.86), 64 hops max, 40 byte packets >>> 1 HQFirewallRS.com (10.0.128.1) 0.575 ms 0.423 ms 0.173 ms >>> 2 * * * >>> 3 192.168.3.86 (192.168.3.86) 47.972 ms 45.174 ms 49.968 ms >>> >>> No response from the FreeBSD "B" box. >>> >>> When I do a tcpdump on "B" of the gre interface I see UDP packets >>> with a TTL of 1 but no ICMP response packets being sent back. >>> If I do the traceroute from the linux workstation 192.168.3.86 I get >>> similar results - I don't see a response from the FreeBSD "A" box. >> could you try using just GRE encasulation? >> (i.e. turn off IPSEC for now) >> >> I think that is much more likely to be where the problem is.. >> >> >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" -- "They that give up essential liberty to obtain temporary safety, deserve neither liberty nor safety." (Ben Franklin) "The course of history shows that as a government grows, liberty decreases." (Thomas Jefferson)